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Abstract. We consider the quantum complexities of the following three 
problems: searching an ordered list, sorting an un-ordered list, and de- 
ciding whether the numbers in a list are all distinct. Letting A'' be 
the number of elements in the input list, we prove a lower bound of 
^(ln(A'^) — 1) accesses to the list elements for ordered searching, a lower 
bound of il{N log N) binary comparisons for sorting, and a lower bound 
of J7(\/iVlog A) binary comparisons for element distinctness. The previ- 
ously best known lower bounds are ^ log2(A) — 0(1) due to Ambainis, 
n{N), and Sl{\/7^), respectively. Our proofs are based on a weighted 
all-pairs inner product argument. 

In addition to our lower bound results, we give a quantum algorithm 
for ordered searching using roughly 0.6311og2(A) oracle accesses. Our 
algorithm uses a quantum routine for traversing through a binary search 
tree faster than classically, and it is of a nature very different from a 
faster algorithm due to Farhi, Goldstone, Gutmann, and Sipser. 



1 Introduction 

The speedups of quantum algorithms over classical algorithms have been a main 
reason for the current interests on quantum computing. One central question 
regarding the power of quantum computing is: How much speedup is possible? 
Although dramatic speedups seem possible, as in the case of Shor's algo- 
rithms for factoring and for finding discrete logarithms, provable speedups are 
found only in restricted models such as the black box model. 

In the black box model, the input is given as a black box, so that the only 
way the algorithm can obtain information about the input is via queries, and 
the complexity measure is the number of queries. Many problems that allow 
provable quantum speedups can be formulated in this model, an example being 
the unordered search problem considered by Grover p^ ]. Several tight lower 

* Research supported by the EU fifth framework program QAIP, IST-1999-11234, and 

the National Science Foundation under grant CCR-9820855. 
** Research conducted in part while at BRICS, University of Aarhus, Denmark. 



2 



bounds are now known for this model, most of them being based on techniques 
introduced in 

We study the quantum complexities of the following three problems. 

Ordered searching Given a list of numbers x = {xo,xi, . . . ,xn-i) in non- 
decreasing order and some number y, find the minimal i such that y < Xi. 
We assume that xjv-i = oo > y so that the problem is always well-defined. 

Sorting Given a list of numbers x = {xo,xi, . . . , xn-i), output a permutation 
a on the set {0, ... , A'' — 1} so that the list {xa-(o) , 2:^^(1) j ■ • • , Xcr{N-i)) is in 
non-decreasing order. 

Element distinctness Given a list of numbers x — {xq,xi,... ,xn-i), are 
they all distinct? 

These problems are closely related and are among the most fundamental and 
most studied problems in the theory of algorithms. They can also be formulated 
naturally in the black box model. For the ordered searching problem, we con- 
sider queries of the type "xi =?", and for the sorting and element distinctness 
problems, we consider queries of the type "Is Xi < Xi' ?" , which are simply binary 
comparisons. Let Hi = X]fc=i \ denote the ith harmonic number. We prove a 
lower bound for each of these three problems. 

Theorem 1. Any quantum algorithm for ordered searching that errs with prob- 
ability at most e > requires at least 



queries to the oracle. In particular, any exact quantum algorithm requires more 
than i(ln(7V) - 1) « 0.220 log2iV queries. 

Theorem 2. Any comparison-based quantum algorithm for sorting that errs 
with probability at most e > requires at least 



comparisons. In particular, any exact quantum algorithm requires more than 
^(In(iV) - 1) « 0.110iVlog2iV comparisons. 

Theorem 3. Any comparison-based quantum algorithm for element distinctness 
that errs with probability at most e > requires at least 




(1) 







comparisons. 
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The previously best known quantum lower bound for ordered searching is 
^ log2(A^) — 0(1), due to Ambainis j^. For comparison-based sorting and ele- 
ment distinctness, the previously best known quantum lower bounds are respec- 
tively i7(iV) and i7(\/iV), both of which can be proven in many ways. 

We prove our lower bounds by utilizing what we refer to as a weighted all- 
pairs inner product argument, or a probabilistic adversary argument. This proof 
technique is based on the work of Bennett, Bernstein, Brassard, and Vazirani 
and Ambainis 

Farhi, Goldstone, Gutmann, and Sipser jl^ have given an exact quantum 
algorithm for ordered searching using roughly 0.526 log2(A^) queries. We pro- 
vide an alternative quantum algorithm that is exact and uses log3(A^) + 0(1) » 
0.631 log2(iV) queries. Our construction is radically different from the construc- 
tion proposed by Farhi et al. and these are the only constructions known 
leading to quantum algorithms using at most clog2(A^) queries for some con- 
stant c strictly less than 1. 

Whereas most quantum algorithms are based on Fourier transforms and am- 
plitude amplification 0|, our algorithm is based on binary search trees. We ini- 
tiate several applications of the binary search algorithm in quantum parallel 
and let them find the element we are searching for in teamwork. By cooperat- 
ing, these applications can traverse the binary search tree faster than classically, 
hereby reducing the complexity from log2(A^) to roughly log3(iV). 

There are at least three reasons why the quantum complexities of the three 
problems are of interest. Firstly because of their significance in algorithmics in 
general. Secondly because these problems possess some symmetries and periodic- 
ities of a different nature than other studied problems in quantum algorithmics. 
Determining symmetries and periodicities seems to be a primary ability of quan- 
tum computers and it is not at all clear how far-reaching this skill is. Thirdly 
because searching and sorting represent non-Boolean non-symmetric functions. 
A (partial) function is said to be symmetric if it is invariant under permuta- 
tion of its input. Only few non-trivial quantum bounds for non-Boolean and 
non-symmetric functions are known. 

The rest of the paper is organized as follows. We first discuss the mod el in 



Sect. 1^, present our general technique for provi ng l owe r bounds in Sect. 
and then apply it to the three problems in Sects. 3.2|-3.4. We give our quantum 
algorithm for ordered searching in Sect. ^ and conclude in Sect. ^ 



2 Quantum black box computing 

We give a formal definition of the black box model, which is slightly differ- 
ent from, but equivalent to, the definition of Beals, Buhrman, Cleve, Mosca, 
and de Wolf given in [0. Fix some positive integer > 0. The input x = 
(xo, . . . , xn-i) G {0, 1} is given as an oracle, and the only way we can access 
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the bits of the oracle is via queries. A query implements the operator 

I l-z; it I > N . 

Here i and z are non- negative integers. By a query to oracle x we mean an 
application of the unitary operator Oa;. We sometimes refer to 0^: as the oracle. 
A quantum algorithm A that uses T queries to an oracle is a unitary operator 
of the form 

A=(UO)^U. (5) 

We always apply algorithm A on the initial state |0). For every integer j > 
and every oracle x, let 

m = {uo,yu\o) (6) 

denote the state after j queries, given oracle x. After applying A, we always 
measure the final state in the computational basis. 

Consider the computation of some function f : S ^ {0, 1}™, where S C 
{0, 1}^. We say that algorithm A computes / with error probability bounded 
by e, for some constant e with < e < 1/2, if for any x S, the probability of 
observing f{x) when the m rightmost bits of IV'J) are measured is at least 1 — e. 



3 Lower bounds 
3.1 General technique 

We use the notation of Sect. For any e > 0, let e' = '2\/e{l — e). 

The computation always starts in the same initial state |0), so for all oracles 
X £ S we have — |0). If for two input oracles x,y G S, the correct answers 
are different, i.e., if f{x) ^ f{y), then the corresponding final states jV'J) and 
I'i/jy) must be almost orthogonal. 

Lemma 4. For all oracles x,y £ S so that f{x) ^ /(y), KV'Jl^J )l < e'- 

Now consider a probability distribution over those pairs of inputs {x,y) € 
S* X S* for which f{x) ^ f{y)- For each integer j > 0, we use the following 
quantity to quantify the average progress of the algorithm in distinguishing any 
two inputs after applying (UO)-'U, 

Observe that Wo — 1 and that Wt < e' by Lemma ^. By proving that for every j 
with < j < T, we have \ Wj - Wj+i\ < 5, we conclude that T > (1 - e')/S. 
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For simplicity of presentation, we scale the probabilities by using a weight 
function lu : S x S ^ M^. From now on, we use the following definition of Wj 
to quantify the overall progress of the algorithm. 

Our technique is a natural generalization of Ambainis' approach which 
uses uniform distributions over subsets of S* x 5'. Our lower bound proofs imply 
that non-uniform distributions can give better lower bounds. Clearly, finding a 
"good" distribution is an important step in applying our technique. Another 
important step is to find a tight bound on the progress after each oracle query. 

We end this subsection by introducing some notation and stating two lemmas 
we require when bounding the progress. For every i > 0, let = J2z>o 1^' *)(^' *l 
denote the projection operator onto the subspace querying the ith oracle bit. For 
i < 0, operator is taken as the zero projection. The following lemma, which 
may be proven by the Cauchy-Schwarz inequality, bounds the quantified progress 
that one oracle query makes in distinguishing two inputs x and y. 

Lemma 5. For any oracles x,y E {0, 1}^, and any integer j > 0, 

We sometimes write \ipx) as shorthand for \tpl) once integer j is fixed. 

Let A — [ak,e]i<k,e<aa be the Hilbert matrix with ak/ = + ^ ~ 1), and 
|||-|||2 be the spectral norm, i.e., for any complex-valued matrix M G cmx™^ ^i^q 
norm |||M|||2 is defined as max{|| Afa;||2}, where the maximum is taken over all 
unit vectors x € C™. Let — [fik,i]i<k,i<N be the matrix where entry Pk,i is 
■^^jzj it k + £ < N + 1, and otherwise. Clearly |||-Biv|||2 < ll^lh for any iV > 0. 
Our lower bound proofs rely on the following property of the Hilbert matrix. 

Lemma 6 (E.g.: Choi Plz = n. Hence, HBnIU < n. 

3.2 Lower bound for ordered searching 

The first non-trivial quantum lower bound on ordered searching proven was 
^( Vlog2 (N) I log2 log2 (iV) ) , due to Buhrman and de Wolf || by an ingenious 
reduction from the parity problem. Farhi, Goldstone, Gutmann, and Sipser |pT| 
improved this to log2(iV)/2 logj log2(iV), and Ambainis [Q then proved the pre- 
viously best known lower bound of ^ log2(A^) — 0(1). In they use, as we 
do here, an inner product argument along the lines of H. In this section, we 
improve the lower bound by a constant factor. 

For the purpose of proving the lower bound, we assume that each of the 
input numbers is either or 1, and that the input does not consist of all 
zeroes. That is, the set S of possible inputs are the ordered A^-bit strings of 
non-zero Hamming weight. The search function / : S {0,1}™ is defined by 
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f{x) = min{0 < i < N \ Xi — I}, where we identify the result f{x) with 
its binary encoding as a bit-string of length m = \log2{N)~\. As our weight 
function w, we choose the inverse of the difference in Hamming weights, 

J ifO</(.)</(,)<^ 
I otherwise. 

With this choice, we have that Wq = NHn — N and by Lemma ^ also that 
Wt <e'Wo. Theorem then follows from the next lemma. 

Lemma 7. For every j with < j < T we have that \ Wj — Wj+i \ < ttN. 

Proof. As shorthand, we write \4'f{x)) for By Lemma ||, 

JV-2 N-1 e-1 

\w,-w,+^\ < 2^ E ^EiiP^i^'^)ii-iiP''i^^)ii 

fe=0 l=k+l i=k 
N-1 d-l N-d-1 

= 2EEd E \\Pk+^Hk)\\■\\Pk+.Hk+d}\\■ 
d=l i=0 k=0 

Let vectors 7 = [7i]o<i<Ar-i & and S — [Si]o<i<N-i € be defined by 

(N-l \ 1/2 / N-1 \ 1/2 

Y,\\Pk+Mf] and = EllPfc— ilV^fc)ln • 

Then, by the Cauchy-Schwarz inequality, 

N-ld-\ 

\W, - Wj+i\ <2J2Y. 2^^^d-^-l = 2j'BnS, (10) 

d=l 1=0 

where t denotes matrix transposition. Since each vector Itpk) is of unit norm, 
we have ||7||i + \\S\\l < N, so ||7||2||(5||2 < N/2. The matrix product 2'^^Bn5 is 
upper bounded by 2||7||2 • |||i?A'|||2 • \\5\\2, which is at most ttN by Lemma ^. □ 



3.3 Lower bound for sorting 

We assume that the N numbers to be sorted, x = {xq, . . . , xm-i), correspond 
to some permutation cr on {0, 1, .. . , TV — 1}. That is, Xi = a{i) for every < i < 
N . We assume the input to the quantum algorithm is the comparison matrix 
Afcr = [TOij/]o<i,i'<Ar with 




1 if CT(i) < cr(i') 
otherwise. 
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One comparison corresponds to one application of the oracle operator 

0.-^ ^ (-ir"'k;*,*')(^;*,*'l- 

z>Oi,i'>Q 

To simplify notation, we sometimes identify the input with the underlining 
permutation a. 

For every pair {i, i'} of indices with < i, z' < iV, let 

Pw = ^ \z;i,i'){z;i,i'\ +^\z;i' ,i){z;i' ,i\ 

z>0 z>0 

denote the projection operator onto the subspace comparing the ith and (z')th 
elements. For any vector we use \ip\ry,k,e) as shorthand for Po— i(fc),o— 

For every permutation cr, and every integers < fc < — 2 and 1 < d < 
N — I — k, define a new permutation, 

a'^''^'^'' ^ {k,k + l,... ,k + d)oa. (11) 

If T = cr('=^'^), then 

(r-^k) ifi^k + d 

a'\i) = < T-\i + 1) ifk<i<k + d (12) 
[r^^(z) otherwise. 

This implies that the comparison matrices Ma- and Mr differ only on the follow- 
ing pairs of entries, 

{a-\k + d),a-\k + i)} = {T-\k),T-\k + i + l)} (13) 

for all i with Q < i < d. 

Informally, if Ala corresponds to some list x, then Mr corresponds to the 
list y obtained by replacing the element of rank A: + d in a; by a new element of 
rank k (the element in x that had rank k then has rank k + 1 m y, etc.). The 
only way the algorithm can distinguish a from r is by comparing the element of 
rank k + d in x with one of the d elements of rank k + i for some < i < d. 

We choose the following weight function, 

I i if T = o'C^''*) for some k and d , , 

w(cr,T) = <^'* (14) 
I otherwise. 

Then one may verify that Wq = N\{NHn ~ N), and Wt < e'Wo. To prove 
Theorem ^, we need only to prove the following lemma. 

Lemma 8. For any j with <j <T, \Wj - Wj+i \ < 2ttN\. 
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Proof. Similar to the proof of Lemma 0. By Lemma ^ and (p^), 



d 

d=l i=0 cr fc=0 



Let 7 = [7i]i<i<Ar e R^"^ be such that 7i = (I]o-Z]f=o^ |||V'crtcr,f,^+i)|| ) , 
where we let i range from to iV — 1 and simply set the thus caused undefined 
projection operators to be zero operators. Then by (O), 



E E ||lV'£T(fc.<J)l'fT.fe+d.fc+i)|| = E E ||lV'Tkfc,fc+i+l)|| < 7jM-1- 
o- fe=0 r fc=0 

Applying the Cauchy-Schwarz inequality, and in analogy with (px|), 

- + < 2 ^ ^ -^ld-^l^+l = 27*SAr_i7. (15) 

d=i i=a 

Since ||7||1 < iV!, we conclude that \Wj - Wj+i \ < 2TrN\. □ 
3.4 Lower bound for element distinctness 



We modify the adversary for sorting as follows. As in Sect. 3.3, when we talk 
about permutations, the underlying set is {0, 1, . . . , N — 1}. 

Definition 9. An annotated permutation is a permutation t with a marker on 
a single element r-r for some < r,- < iV — 1. 

For every permutation a, and every integers k and d as in Sect. |3.3| , the annotated 
permutation r = a'^'^''^) is the same permutation as in ( p] ) but with the rank 
k element marked. The only places where Ma and Mr differ, are at the same 



entries as those in (13). 

We use the same weight function as in (p^. Then Wq — N\ {NHn — N) and 
Wt < e'Wo. We need only to prove the following lemma. 

Lemma 10. For any integer j with < j <T, \Wj — Wj+i \ < 2nN\^/N. 

Proof. Almost identical to the proof for Lemma ra, except that we now require a 

1 1 2 1 /2 

second vector S — [di]i<i^N e M^-l with = (E, mr\r.r^,r^+^)\\ r ■ Then 

by (fTT 



N-d-l 

E E lllV'o-C'.'') U./c+d./c+i)!! = ^ IllV'rtr.r^.r^+i+l)!! < Sf+l- 
<y k=0 T:rr<N-d 
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In analogy with we have 

N-l d-1 

\W, - W,+i\ < 2 ^ ^ ^7d^.'5,+i = 

d=l i=0 

Besides having ||7|1^ < Nl as in the proof of Lemma ||, we also have that 

N-l 

ll'^ll' = E E l|lV'rk..,..+,:>f < N\{N - 1) < NIN. 
Therefore, \Wj - Wj+i \ < 2'K^/N'\^/N\N = 27r7V!\/]V. □ 

4 A log3(Ar) algorithm for ordered searching 

We begin by considering binary search trees on which our quantum algorithm is 
based. Let T be a binary tree with N > 2 leaves. We put colored pebbles on the 
(internal) vertices of T subject to the following 2 conditions: 

(A) on every path from the root of T to a leaf, there is exactly 1 pebble of each 
color, and 

(B) the number of pebbles py on any vertex u g T is at least as large as the total 
number of pebbles on its proper ancestors. 

We say that T is covered by N' pebbles if we can satisfy the 2 above conditions 
using at most N' pebbles of each color. We want to minimize the maximum 
number N' of pebbles used of any color. We say a covering is fair if it uses 
the same number of pebbles of every color. We say a covering is tight if, for all 
vertices u G T, we have that py equals the total number of pebbles on its proper 
ancestors, or there are no pebbles on any of the ancestors of v. We require the 
following two lemmas. 

Lemma 11. For every even integer N > 2, there exists a binary tree with N 
leaves that can be fairly and tightly covered by N' = L^-^ + ^'^E2i'^)\ Pebbles 
using 2* colors, where s — [log4(A'^/2)J . 

Lemma 12. Let integer-valued function F be recursively defined by 

p.j^,iF{[lN + \og^{N) + l\) + l tfN>8 
\l ifN<8. 

Then F{N) = log3(iV) + 0(1). 



As in Sect. 3.2, we assume the oracle x = {xq,... ,xn~i) S {0,1}^ is a 
binary string of non-zero Hamming weight. The problem is to determine the 
leftmost 1 in x, that is, to compute f{x) = min{0 < i < N \ Xi = 1}. Let T 



10 



be a binary tree with N leaves for which Lemma ^ holds. Let s — [log4(iV/2)J 
and N' = l^N + log2(7V)J be as in the lemma. We label the N leaves of T by 
{0, ... , — 1} from left to right. Let £f[x) denote the leaf labelled by f{x), and 
let V denote the path from the root of T to the parent of if(x)- We think of V 
as the path the classical search algorithm would traverse if searching for f{x) in 
tree T. 

Let C = {cq, . . . , C2s-i} be the set of 2" colors used in Lemma |ll|. For each 
color c £ CjletVc denote the set of vertices in T populated by a pebble of color c. 
By Condition (A), there are at most N' such vertices, that is, \Vc\ < N' . Let Vc 
denote the unique vertex in Vc that is on path V. We think of vertex Vc as the 
root of the subtree "containing" leaf £f(x)- Note that, by definition, Vc £ V for 
every color c £ C, and that J^vevP"" ~ Condition (A). 

Our algorithm utilizes 3 unitary operators, Ui, 0^, and U2 - The first operator, 
Ui, is defined by 

Ui: \vm ^ |„)('^^|c)) iv£T), (16) 

\ VP'" c ^ 

where the summation is over all colors c £ C that are represented by a pebble on 
vertex v. We refer to Ui as the coloring operator and its inverse as the un-coloring 
operator. 

The query operator 0^ is defined by 

I |w; Xi) if there are no pebbles on the parent of v 

otherwise, ^''^ 

where i denotes the label of the rightmost leaf in the left subtree of vertex v. 
Query operator 0^ is clearly unitary (or rather, can be extended to a unitary 
operator since it is only defined on a proper subspace). Operator 0^ is slightly 
different from, but equivalent to, the query operator defined in Sect. |2| It mimics 
the classical search algorithm by querying the bit Xi that corresponds to the 
rightmost leaf in the left subtree of v. 

We also use a unitary operator U2 that maps each vertex to a superposition 
over the leaves in its subtree. For every vertex and leaf u in T, let C{u) denote 
the set of leaves in the subtree rooted at m, and let 

where d{u^ i) denotes the absolute value of the difference in depths of u and 
leaf £. The unitary operator U2 is (partially) defined as follows. For every vertex 
V £ T with no pebbles on its parent, 

\v;0) ^ |<?rightw) (19.1) 
\v;l) ^ |<?ieftH), (19.2) 
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and for every vertex w e T with pebbles on its parent, 

\v) ^ -L(|<p,,gi^^(^))-|^)i^f,(^,))). (19.3) 

Here left(u) denotes the left child of v, and right (u) the right child. 

Our quantum algorithm starts in the initial state |0) and produces the final 
state \if{x))- Let F{N) denote the number of queries used by the algorithm on 
an oracle x of size N. 

1. We first set up a superposition over all 2^ colors, 12cec l^^)!*^)- 

2. We then apply our exact quantum search algorithm recursively. For each 
color c g C in quantum parallel, we search recursively among the vertices 
in Vc, hereby determining the root Vc G Vc of the subtree containing the 
leaf if(x)- Since | V^d < N' , this requires at most F{N' + 1) queries to oracle x 
and produces the superposition X^cec 1''^^) |c) . Since every vertex Vc in this 
sum is on the path V, we can rewrite the sum as 

3. Wc then apply the un-coloring operator U^^^, producing the superposition 

X^tiep \/Pv l"*^) |0) ■ Ignoring the second register which always holds a zero, 
this is 

^iEVp^I^)- 

That is, we have (recursively) obtained a superposition over the vertices on 
the path V from the root of T to the parent of the leaf if[x) labelled by f{x). 

4. We then apply the operator y^2^'x^ producing the final state 

u20L^Evp^i") = 4f Evp^u^ou^), 



/OS Z — t ^ /OS 



which one can show equal to \(-f[x))- Thus, a final measurement of this state 
yields f{x) with certainty. 

The total number of queries to the oracle x is at most F{N' + 1) + 1 , and thus, 



by Lemma 12, the algorithm uses at most log3(iV) + 0(1) queries. Theorem [13| 
follows. 



Theorem 13. The above described quantum algorithm Jot searching an ordered 
list of N elements is exact and uses at most log3(A^) + 0(1) queries. 
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5 Concluding remarks and open problems 

The inner product of two quantum states is a measure for their distinguishabihty. 
We have proposed a weighted aU-pairs inner product argument as a tool for 
proving fower bounds in the quantum black box model. The possibility of using 
non-uniform weights seems particularly suitable when proving lower bounds for 
non-symmetric (possibly partial) functions. It could be interesting to consider 
other measures than inner products, as discussed, for instance, by Zalka p^ , 
Jozsa and Schlienz , and Vedral . 

The result of Grigoriev, Karpinski, Meyer auf der Heide, and Smolensky jl^ 
implies that if only comparisons are allowed, the randomized decision tree com- 
plexity of element distinctness has the same n{NlogN) lower bound as sorting. 
Interestingly, their quantum complexities differ dramatically: the quantum algo- 
rithm by Buhrman et al. uses only 0{N'^/'^ log A^) comparisons. There is still 
a big gap between this upper bound and our lower bound of Q{N^/'^ log A^). One 
way of closing this gab might be to consider quantum time-space tradeoffs, as 
has been done for the classical case 

Our algorithm for searching an ordered list with complexity log3(A^) + 0(l) is 
based on the classical binary search algorithm. The quantum algorithm initiates 
several independent walks/searches at the root of the binary search tree. These 
searches traverse down the tree faster than classically by cooperating, and they 
eventually all reach the leaf we are searching for in roughly log3(A^) steps. It could 
be interesting to consider if similar ideas can be used to speed up other classical 
algorithms. For instance one may consider other applications of operators like U2 
acting on rooted trees and graphs. 
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